github/slsa-verifier
1
0
Fork 0
mirror of https://github.com/slsa-framework/slsa-verifier.git synced 2026-05-16 13:36:33 +00:00
Code Issues Packages Projects Releases Wiki Activity

cleanup, more skeleton

Browse Source 
Signed-off-by: Ramon Petgrave <ramon.petgrave64@gmail.com>
This commit is contained in:
Ramon Petgrave
2024-06-18 18:48:42 +00:00
parent 1f123f3c1d
commit edde0a8aca
1 changed files with 11 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
verifiers/internal/vsa/verifier.go
View File

@@ -33,12 +33,10 @@ func VerifyVSA(ctx context.Context,
if err != nil {
return nil, nil, err
}
fmt.Println(sigstoreStatement)
vsa, err := vsa10.VSAFromStatement(sigstoreStatement)
if err != nil {
return nil, nil, err
}
fmt.Println(vsa)
// verify the envelope. signature
err = verifyEnvelopeSignature(ctx, &sigstoreEnvelope)
@@ -48,6 +46,12 @@ func VerifyVSA(ctx context.Context,
// TODO:
// verify the metadata
err = matchExpectedValues(vsa, vsaOpts)
if err != nil {
return nil, nil, err
}
// TODO:
// print the attestation
return nil, nil, nil
}
@@ -78,3 +82,8 @@ MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEeGa6ZCZn0q6WpaUwJrSk+PPYEsca
}
return nil
}
func matchExpectedValues(vsa *vsa10.VSA, vsaOpts *options.VSAOpts) error {
// TODO: implement this function
return nil
}